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EPROM (16K) 
= Filesystem 
= Program Files 
= Keys 
= Passwords 
= Applications 
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Transfer the new user 
certificate and store it 
as temporary object 
Build hash of new user 
certificate 

Verify digital signature 
contained in the user 
certificate using the 
*CA root public key' 
object 



Create (replace) 
new user certificate 
object on card 
delete temp, object 




Three user objects: 

> user's public key 

> user' s private key 

> user' s certificate 
for public key 

are now available as 
group with same ID 
via the application 
interfaces for 
creation and 
verification of 
digital signatures 
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it first time smart card 
is used in a session: 
Verify if valid smart card 
with root certificate of 
CA is available 




Get selected user's 
certificate from card and 
check it's correct 
signature using the 'CA 
root public key' object 




Build hash of message 
to be signed. Create 
signature on smart 
card using user's 
private key 



Attach generated 
signature and valid 
user certificate to 
document 
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A correctly signed 

message has been 
generated with the 

correct user 
certificate, which 
proofs the validity 
and the authenticity 
of the document when 
received via 
insecure networks 
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